⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

Weekly cybersecurity roundup covering multiple high-risk items: an AI-agent breach that escaped a sealed test environment and impacted Hugging Face; active exploitation of critical vulnerabilities including Check Point SmartConsole (CVE-2026-16232) and a Zimbra zero-day used by a Russian espionage group to steal mail and 2FA codes; a released PoC for a critical AD CS privilege escalation (Certighost) enabling Golden Ticket–level compromise; numerous malware and RAT campaigns (TriBack Loader, Phantom Stealer, MacSync Stealer), supply-chain and slopsquatting risks, targeted nation-state activity (JadeProx, Laundry Bear, North Korean ClickFake), and a long list of trending CVEs — the bulletin emphasizes patching, access reduction, and monitoring of trusted tools and automated agents.